
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1096265459348537346/1/1C519CD1C415925E7FCE92FDA20FF18EC544C74B.mft
File: 1C519CD1C415925E7FCE92FDA20FF18EC544C74B.mft (raw, json)
Hash identifier: o21eG7o6wRANJWfQUzYG+FjRwizrfK7U8ydQcyi61aw=
Subject key identifier: 68:34:21:C1:A5:26:29:47:A6:E7:DF:BE:92:B2:96:24:95:D2:CD:FF
Authority key identifier: 1C:51:9C:D1:C4:15:92:5E:7F:CE:92:FD:A2:0F:F1:8E:C5:44:C7:4B
Certificate issuer: /CN=1C519CD1C415925E7FCE92FDA20FF18EC544C74B
Certificate serial: 49D33CB3D9142AD2F004413DDA273B3E98E7C10D
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1C519CD1C415925E7FCE92FDA20FF18EC544C74B.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096265459348537346/1/1C519CD1C415925E7FCE92FDA20FF18EC544C74B.mft
Manifest number: EC
Signing time: Thu 24 Sep 2026 06:01:24 +0000
Manifest this update: Thu 24 Sep 2026 05:56:24 +0000
Manifest next update: Sun 27 Sep 2026 09:58:24 +0000
Files and hashes: 1: AS4847.roa (hash: 3rkjW99xQWcKDBNK98Xl6QzkJQaB+U43s7sVMj+RwZA=)
2: AS4835.roa (hash: jAlH6Xn9Wx5euSm8I4X3tFNqFODKHPGDOqig5p/XK0k=)
3: AS17428.roa (hash: e/ULKElOqavWoA242IT/ZZxzH9PHsVAXBwW95iPT/jU=)
4: AS56040.roa (hash: HmwkCKoBQAU0uWAz5pjtRSJjSvqZi0caB0vR01UCqYc=)
5: AS23724.roa (hash: T0fAwl6wYamPJGnxn4dx30kfD3ZCVW9sUQOvSfYJGI0=)
6: AS9808.roa (hash: 9DHAOxqPuZWJZQUPJlPeIiLta+TaGPyXD7TDGW80KoU=)
7: AS4808.roa (hash: u9OQxrqhpl1T/0ARzRa6lSxGFhl35YXPeECNJjqNd3M=)
8: AS17622.roa (hash: PlKFHLxhO02lNPofzh4875427lXAWURw4U69Gq37PDM=)
9: AS58466.roa (hash: 2DFqjnyNEv+uIPb/Uz6u1okUeW1cxPg4G+ffDatksUE=)
10: AS133111.roa (hash: wczUjdPp/Uwb5rWXi6oHegyjpDQrvqpc3CUSK3r89BE=)
11: 1C519CD1C415925E7FCE92FDA20FF18EC544C74B.crl (hash: MM2ZHNehXIoiUcopb5Saljb7EGNxNx/B6+EvbXafQsE=)
12: AS24400.roa (hash: 6koc0r+8oNvvJQ2n6u3kgNbZRGNkhF9vXGd/vCdqpYw=)
13: AS56046.roa (hash: mI1nt0SayxXQElAcu/cyI1exRhs6Pf9DcnVs45ciUq8=)
14: AS0.roa (hash: 132zAU1ahbknkNfBYBXQHL/eCue+m6AOBrdUkC7GbYY=)
15: AS141679.roa (hash: +Dz+vmsU4Nyyvwcx+gRYUKBEeW5WRorKlfoJ/42yBPw=)
16: AS133119.roa (hash: cMFfyh0zqTClFl0ii2ZoZ1a+PgYVLblIHc1vHK0hAZs=)
17: AS9308.roa (hash: yftVhdAdhOlgvCg9H9SqFVvRoFbUFos16+3UvIPNuZo=)
18: AS59020.roa (hash: /Pd1x3KaSGQFTXTyZbDS1WOjjkXg/3ewVYnbuFdYmwE=)
19: AS4811.roa (hash: ddTKO1AsNR1SULkjlm2Hn5h6NSHZWKPAKCykA8E69zo=)
20: AS18244.roa (hash: 5yJK4ELO+Ql7zMnruxm9AyXZ6E0mJAXs2fYYGtt7U6s=)
21: AS136958.roa (hash: es7Px72aZsegKB/zlZjsZawH5pspdJD+M95b+DUVsMk=)
22: AS56020.roa (hash: 0sLTu+DPLeyeHTFssSu3l6BgQB8sTAdWzngp4fBzNf4=)
23: AS56048.roa (hash: 5zXzSkrBQUFfid6aK1Hyf4IH0zjb8rUH3Vawr//Qfho=)
24: AS17621.roa (hash: wfLodr6aTTmW76SpdHD4FwYka5Izs6CtYx4KwIUOG8I=)
25: AS9802.roa (hash: 4/kRC4vWJ83omtig7t5aCQ+XqmsWSbaprpXcANd7oSg=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096265459348537346/1/1C519CD1C415925E7FCE92FDA20FF18EC544C74B.crl
rsync://rpki-rps.cnnic.cn/repo/A1096265459348537346/1/1C519CD1C415925E7FCE92FDA20FF18EC544C74B.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1C519CD1C415925E7FCE92FDA20FF18EC544C74B.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 27 Sep 2026 09:58:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:d3:3c:b3:d9:14:2a:d2:f0:04:41:3d:da:27:3b:3e:98:e7:c1:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1C519CD1C415925E7FCE92FDA20FF18EC544C74B
Validity
Not Before: Sep 24 05:56:24 2026 GMT
Not After : Sep 27 09:58:24 2026 GMT
Subject: CN=683421C1A5262947A6E7DFBE92B2962495D2CDFF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:a5:32:b9:c8:07:cf:b0:68:0b:5d:df:ac:59:
c5:35:87:12:0a:ad:83:ab:0e:d0:da:ff:df:83:14:
c1:d0:d8:f2:a0:c4:42:ad:88:30:fc:79:30:1d:ff:
c6:60:e4:99:ec:ed:d0:a3:81:a0:dc:31:8c:99:33:
70:8d:ff:3c:cb:40:04:b8:de:9a:f5:c0:54:7e:b5:
bc:96:d2:15:cf:7d:26:72:60:78:e5:ce:80:1e:67:
43:28:47:b5:29:a7:47:2a:bb:07:3c:11:68:18:c1:
8e:b0:0c:c1:d8:0b:57:74:ff:8f:15:03:81:1c:65:
59:7f:6d:fd:9c:64:a4:33:30:6e:e3:af:c8:59:50:
60:6e:1e:e6:22:e9:25:f7:21:7d:a5:09:bd:8f:5f:
45:f2:13:2d:d3:7f:89:e5:ac:3a:43:cc:14:38:39:
ee:d6:60:40:6e:a7:12:7f:6a:8f:24:03:2b:ae:8f:
e9:67:21:32:1a:47:fd:73:8c:b2:17:79:7b:da:60:
35:e8:5e:44:ff:ae:24:6f:72:db:1e:0f:2d:37:e2:
94:1e:56:4b:6d:bb:e5:ff:67:2e:3d:57:59:72:4a:
ce:88:de:8d:de:33:8b:69:4e:89:81:92:ac:79:68:
c6:d4:6c:15:6e:5d:ae:58:b7:de:4d:2d:3b:4e:51:
66:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:34:21:C1:A5:26:29:47:A6:E7:DF:BE:92:B2:96:24:95:D2:CD:FF
X509v3 Authority Key Identifier:
keyid:1C:51:9C:D1:C4:15:92:5E:7F:CE:92:FD:A2:0F:F1:8E:C5:44:C7:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1096265459348537346/1/1C519CD1C415925E7FCE92FDA20FF18EC544C74B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1C519CD1C415925E7FCE92FDA20FF18EC544C74B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096265459348537346/1/1C519CD1C415925E7FCE92FDA20FF18EC544C74B.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:ec:51:55:69:94:63:e5:3b:ed:9d:18:b5:b1:ea:bd:45:6a:
46:b6:34:ff:94:c3:3b:33:e4:7d:d2:9e:96:03:fb:0f:9b:6c:
6c:69:2b:6e:63:08:6b:bf:a6:c9:00:8a:47:1f:96:f6:28:35:
46:8a:25:40:7f:51:a1:85:49:82:b0:1e:a1:9e:d0:df:fe:cd:
f7:cd:53:54:4f:11:da:13:24:77:c8:e0:95:90:5a:0d:1a:97:
d3:55:1c:d8:cc:c4:38:56:fb:d0:31:cd:73:8e:e7:b0:46:34:
91:ae:76:a7:12:76:89:b8:43:36:9d:6b:e8:28:d9:25:cb:ae:
08:ea:93:41:72:a9:26:e1:7d:c1:b2:d1:69:34:b6:94:c7:01:
67:1e:a6:3b:8d:f0:25:48:1a:0f:4f:8f:29:a0:24:9a:71:a0:
0b:a5:f5:f4:ca:18:1c:e9:0a:64:19:b7:7b:76:3f:fc:a9:63:
70:0d:2b:4d:1b:85:31:fb:8a:9e:da:d5:44:09:7c:e5:9c:d3:
33:e7:b5:2b:8f:12:3a:8c:3f:95:95:7a:60:d0:1f:6c:b6:54:
90:9d:f9:9d:c2:3b:43:33:3e:45:f0:dc:27:18:9d:e1:45:c4:
3b:27:e8:f0:a3:ae:bc:21:7a:99:c3:c1:79:11:85:9d:94:de:
1b:f4:c4:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 04:39:49 2026 by rpki-client